networkstatus_parse_vote_from_string() validates the second
argument of network-status-version which is the flavor of the
consensus. If the flavor is invalid it log_warn()s the third
argument which is not guaranteed to exist. This means that escaped() receives a non-allocated section of memory as its argument and treats it as a pointer to a string; this should lead to a segfault.